Threats tagged 'brew-icloudpd-cve-2024-3651'

A denial-of-service vulnerability exists in the idna.encode() function used by icloudpd. A specially crafted input can cause excessive resource consumption, leading to denial of service. The issue is fixed in icloudpd version 1.17.4_1. Enforcing a domain name length limit of 253 characters before calling idna.encode() can mitigate the issue.